94 Commits

Author	SHA1	Message	Date
m0duspwnens	b693373d8d	change how we allow or disallow states to be run https://github.com/Security-Onion-Solutions/securityonion/issues/2679	2021-01-20 15:09:53 -05:00
Mike Reeves	2950779d91	Fix stralka rule update	2021-01-13 09:57:12 -05:00
Wes Lambert	ac96ded2dc	Support setting rule repos via pillar	2020-12-22 15:36:15 +00:00
weslambert	2fee2ca143	Change identifier name to be more descriptive	2020-12-18 15:40:54 -05:00
weslambert	7453626b06	Add identifier	2020-12-18 15:39:52 -05:00
weslambert	1a463bccaf	Add cron.absent to remove old cron job if present	2020-12-18 11:25:14 -05:00
weslambert	9493aad1a5	Read from dedicated unprocessed dir	2020-12-18 10:53:17 -05:00
weslambert	bf76c1b58c	Create unprocessed dir and move Zeek extracted files there	2020-12-18 10:52:14 -05:00
weslambert	c819729cd6	Don't use max_files or time_to_live for shutdown params	2020-12-02 13:17:19 -05:00
weslambert	9517cb2a58	Remove ScanMmbot	2020-12-01 11:25:51 -05:00
m0duspwnens	1fca5e65df	redo how containers get added to so-status https://github.com/Security-Onion-Solutions/securityonion/issues/1681	2020-11-10 15:31:47 -05:00
m0duspwnens	4ee3e1ed01	fix sensor mainip logic for strelka yaml files	2020-09-16 10:29:23 -04:00
Mike Reeves	112a0b426e	Merge branch 'dev' into experimental	2020-09-13 14:54:00 -04:00
Mike Reeves	48d1d0c168	Strelkas Rules Update	2020-09-11 18:24:56 -04:00
m0duspwnens	09cc8ae1fb	fail the state if it isnt in top	2020-09-09 16:48:50 -04:00
m0duspwnens	a229ae82ce	only allow state to run if it is in top for the node	2020-09-02 16:15:52 -04:00
weslambert	000c2abb33	Update timing for so-yara-update	2020-08-26 11:02:33 -04:00
Jason Ertel	2325940789	Ensure strelka manager connects to local redis on heavy nodes	2020-08-19 16:24:28 -04:00
Jason Ertel	5ff0058a65	Ensure strelka backend, frontend, and filestream are connecting to redis locally, on heavy node instances	2020-08-19 16:13:18 -04:00
Mike Reeves	24ed92c9dc	minio and change to global	2020-08-04 15:54:03 -04:00
Jason Ertel	8f66a27f07	Refactor image repository to a single variable	2020-07-13 18:26:43 -04:00
m0duspwnens	9c2dcd2318	fix reference to master grain	2020-07-09 17:06:44 -04:00
m0duspwnens	3cf31e2460	https://github.com/Security-Onion-Solutions/securityonion/issues/404	2020-07-09 11:27:06 -04:00
Wes Lambert	a24402de99	More Strelka rule config	2020-06-25 16:31:04 +00:00
Wes Lambert	63c45be388	Update Strelka init for rules	2020-06-25 15:49:58 +00:00
Wes Lambert	52a0ace1b8	Use Strelka rules if enabled	2020-06-24 17:08:58 +00:00
weslambert	f3809cb93d	Wrap with quotes	2020-05-27 08:31:14 -04:00
Wes Lambert	e09027e795	update Strelka cron	2020-05-26 13:00:03 +00:00
m0duspwnens	eebe0eb618	get the first ip for the ip_interfaces:mainint grain	2020-05-18 10:54:07 -04:00
m0duspwnens	037bedb0c0	remove whitespace at top of file	2020-05-18 10:48:02 -04:00
m0duspwnens	15cd0c6b49	change strelka ip for sensor nodes	2020-05-18 10:41:39 -04:00
Mike Reeves	09e2413695	Remove version hardcode	2020-05-10 17:31:50 -04:00
m0duspwnens	766b56a944	update dockers to 1.2.2	2020-04-23 10:11:26 -04:00
Mike Reeves	4cc2951ac4	Fix the Strelka redis	2020-04-15 17:34:54 -04:00
Mike Reeves	5eed79e87e	Fix the Strelka version	2020-04-15 15:38:48 -04:00
Mike Reeves	fb09c85386	Change location of strelka dockers	2020-04-15 14:37:37 -04:00
Wes Lambert	17fd32f12d	change restart policy for now	2020-04-03 01:07:45 +00:00
Wes Lambert	d477d73baa	change user	2020-04-03 01:02:46 +00:00
weslambert	cc4b1bf936	Add Zeek extracted file sync	2020-04-01 14:19:36 -04:00
weslambert	5173da5a33	Remove restart policy	2020-04-01 13:19:31 -04:00
Wes Lambert	9bbcc185aa	change Strelka log location	2020-04-01 12:57:51 +00:00
Wes Lambert	4939884d93	Update Strelka init	2020-03-02 22:15:55 +00:00
Wes Lambert	c597dd2fb4	Strelka - Filebeat config	2019-12-18 03:22:30 +00:00
Wes Lambert	88f142664f	Strelka - intial config	2019-12-18 03:13:14 +00:00